Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
File:                     b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json)
Hash identifier:          HhGEpf3JAYBfpQdr3eBbLvZ9t668hjqZiTBvqHfzVT0=
Subject key identifier:   3A:28:70:3B:9A:32:36:B0:B6:14:71:CF:11:D5:07:5A:B1:80:B0:70
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Certificate issuer:       /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial:       01965681872594B7A41E69E8BBD04BC8D68B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
Manifest number:          0177
Signing time:             Mon 21 Apr 2025 04:00:51 +0000
Manifest this update:     Mon 21 Apr 2025 04:00:51 +0000
Manifest next update:     Tue 22 Apr 2025 04:00:51 +0000
Files and hashes:         1: EojBLE-kejfyfqtsbOflpbWdQR8.roa (hash: RAQIxXhtS5DacFq9O32LjkXlaDp6cgdHs91Xbraog08=)
                          2: G-IyOfxP0oIKcgqsyvK7PQysJI4.roa (hash: J12Xsn1iPdPrEhwd+oE2AQU+Dv20weYAXKmMI/VZwUY=)
                          3: XayvmfzLwFIrnB6YR1N8a3QlP3g.roa (hash: yW+e4Wc1yic51HqaRnNHy8V0Min8R+kpxRu8CLP1al8=)
                          4: YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa (hash: Gjz0NNqi1uea9ZdNKd1fYQPsBvHDVmsLfdpqjwRA4dc=)
                          5: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: j8g/iyX4tiJtUNO3R1zygp8w4uXKskRzBdWuXvsDu2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:81:87:25:94:b7:a4:1e:69:e8:bb:d0:4b:c8:d6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
        Validity
            Not Before: Apr 21 04:00:51 2025 GMT
            Not After : Apr 22 04:00:51 2025 GMT
        Subject: CN=3a28703b9a3236b0b61471cf11d5075ab180b070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:19:28:4b:30:50:f6:15:ab:bb:3b:aa:82:
                    43:61:bb:c3:c1:f5:5e:c4:38:fa:68:37:13:bb:1b:
                    89:16:92:45:94:d5:ca:d3:be:43:b1:ea:fd:b6:0a:
                    d8:cd:18:f2:8a:6a:c5:b7:27:94:bf:92:a3:24:14:
                    13:3e:44:7f:54:b4:f1:b6:bc:8a:98:09:5b:fc:15:
                    1f:54:84:f6:4d:25:bc:cd:74:d0:88:71:6a:9b:4b:
                    b2:94:b5:4b:48:7c:37:be:f4:ab:a3:ca:91:b8:b1:
                    ed:9e:47:53:b8:d1:c6:93:17:01:1c:80:4d:f5:b0:
                    fc:67:f8:a4:04:53:6f:7d:13:72:60:86:16:70:1c:
                    1c:02:57:f6:4c:5e:8d:f9:88:ff:0f:af:75:8b:bc:
                    6d:04:d2:61:c1:3f:d8:f8:8a:9e:9e:42:7c:60:c3:
                    ff:12:7a:9a:f7:7d:a7:92:24:c8:70:e1:d2:9d:d2:
                    35:84:a4:1f:82:d3:bc:34:1e:95:b2:cc:90:4b:98:
                    18:cf:86:7a:68:36:ad:4e:f0:e3:7e:36:43:5b:e2:
                    b5:91:90:03:5c:3c:e1:ee:21:1d:84:0b:a2:cd:c5:
                    19:15:16:8c:e1:ea:a0:a5:9b:fd:3c:92:fa:16:11:
                    0f:01:7b:94:ca:0c:2d:2a:3f:e0:9a:3b:ce:16:20:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:28:70:3B:9A:32:36:B0:B6:14:71:CF:11:D5:07:5A:B1:80:B0:70
            X509v3 Authority Key Identifier:
                keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:a5:93:58:df:36:4c:bf:36:b8:76:70:4b:c0:32:55:dc:
         4c:46:05:ef:63:93:f4:f9:f4:2b:c2:8e:fb:74:e2:2f:3f:ab:
         2d:60:c9:9c:9b:10:c0:40:6b:92:b6:5f:2a:63:d4:5f:22:8d:
         4d:d9:3e:e3:bd:82:e8:54:35:a6:45:74:38:79:cf:2f:60:7c:
         85:b0:d1:b6:4f:fa:f4:9c:3b:c8:1c:52:c2:f9:25:b2:dd:68:
         4b:af:2e:db:ab:9d:25:25:36:e1:3a:c1:aa:f8:4d:ee:b2:df:
         ce:91:cf:48:fb:b0:72:33:71:b3:9c:0d:f7:b3:f8:11:b5:42:
         63:82:98:dd:76:ee:b2:51:81:e3:52:76:a1:93:f3:f6:1f:28:
         89:e4:79:52:0b:ea:2f:63:01:6e:06:ce:85:c3:93:ed:90:e7:
         a9:09:e9:61:44:5f:20:de:f1:4f:8a:d8:11:22:49:3a:82:3d:
         68:02:d1:b9:1a:e2:9b:e3:65:75:f9:05:e9:1b:58:3f:31:84:
         b9:c2:e2:18:b3:af:e8:47:1b:4c:d6:28:0c:7c:65:3c:82:24:
         57:62:98:f5:f4:f2:09:9d:8e:bd:7b:6b:86:7b:4b:4a:70:71:
         07:73:01:e6:29:c5:e6:53:44:d2:e8:f6:2c:da:80:9a:fa:d8:
         1a:66:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:02 2025 by rpki-client